{"id":21586,"date":"2024-06-23T17:23:58","date_gmt":"2024-06-23T17:23:58","guid":{"rendered":"https:\/\/www.stroople.com\/?p=21586"},"modified":"2026-08-16T12:01:01","modified_gmt":"2026-08-16T12:01:01","slug":"conformite-de-dora","status":"publish","type":"post","link":"https:\/\/www.stroople.com\/fr\/dora-compliance\/","title":{"rendered":"Comment se mettre en conformit\u00e9 avec le DORA ?"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"21586\" class=\"elementor elementor-21586\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4cee5ce4 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"4cee5ce4\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6575074a syd-sticky-section-no\" data-id=\"6575074a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-60fc95bb syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"60fc95bb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\n<p class=\"wp-block-paragraph\">Lockbit : de la Gen\u00e8se au Jugement dernier<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-237aa61 elementor-section-items-stretch elementor-section-height-min-height elementor-section-content-middle elementor-section-stretched elementor-section-boxed elementor-section-height-default syd-sticky-section-no\" data-id=\"237aa61\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8322851 syd-sticky-section-no\" data-id=\"8322851\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f3bf3e5 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"f3bf3e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Comment se mettre en conformit\u00e9 avec le DORA ?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d9272c6 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"d9272c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Un guide pour les professionnels de la cybers\u00e9curit\u00e9<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-22f4239 elementor-widget-divider--view-line syd-sticky-section-no elementor-widget elementor-widget-divider\" data-id=\"22f4239\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3597f18 elementor-align-center elementor-icon-list--layout-traditional elementor-list-item-link-full_width syd-sticky-section-no elementor-widget elementor-widget-icon-list\" data-id=\"3597f18\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"#aboutus\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">D\u00e9filer vers le bas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-a27098a elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"a27098a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-19efd7f syd-sticky-section-no\" data-id=\"19efd7f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cb8dd0a elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"cb8dd0a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-278276c syd-sticky-section-no\" data-id=\"278276c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0c4d08f syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"0c4d08f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4acf9da syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"4acf9da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Dans le secteur financier, les cyberattaques ont augment\u00e9 de mani\u00e8re spectaculaire. Entre le deuxi\u00e8me trimestre 2022 et le deuxi\u00e8me trimestre 2023, les cyberattaques contre les entreprises de services financiers en Europe ont plus que doubl\u00e9, augmentant de 119 %. Cette tendance alarmante souligne l'urgence de se conformer au r\u00e8glement sur la r\u00e9silience op\u00e9rationnelle num\u00e9rique (DORA). DORA vise \u00e0 garantir une haute r\u00e9silience op\u00e9rationnelle num\u00e9rique pour toutes les entit\u00e9s financi\u00e8res r\u00e9glement\u00e9es. Publi\u00e9e au Journal officiel de l'UE en novembre 2022, DORA impose aux entit\u00e9s financi\u00e8res de signaler rapidement et de mani\u00e8re exhaustive les incidents majeurs li\u00e9s aux TIC aux autorit\u00e9s de surveillance et aux acteurs du march\u00e9, permettant ainsi une r\u00e9ponse rapide et appropri\u00e9e au sein du syst\u00e8me financier de l'UE. DORA entre en vigueur le 17 janvier 2025 dans tous les \u00c9tats membres de l'UE, compl\u00e9tant les lois existantes telles que la directive sur la s\u00e9curit\u00e9 des r\u00e9seaux et de l'information (NISD), NIS2 et le r\u00e8glement g\u00e9n\u00e9ral sur la protection des donn\u00e9es (RGPD).<\/p>\n<p>DORA introduit un changement de paradigme avec son accent sur la \u00ab r\u00e9silience \u00bb. Les entreprises du secteur financier doivent s'organiser d\u00e8s le d\u00e9part pour g\u00e9rer efficacement les pannes et les cyberattaques.<\/p>\n<p>DORA s'applique \u00e0 presque tous les types d'entit\u00e9s financi\u00e8res au sein de l'Union europ\u00e9enne. Bien que les banques et les compagnies d'assurance soient les plus \u00e9videntes, de nombreuses autres organisations sont \u00e9galement couvertes par l'Article 2 de DORA. De plus, DORA exige que les entit\u00e9s financi\u00e8res g\u00e8rent les risques associ\u00e9s aux fournisseurs tiers, ce qui implique que ces fournisseurs doivent \u00e9galement se conformer aux r\u00e9glementations DORA.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e9fe119 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"e9fe119\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3>Les avantages \u00e0 int\u00e9grer les r\u00e9f\u00e9rentiels de cybers\u00e9curit\u00e9 avec DORA<\/h3>\n<p>Les standards de s\u00e9curit\u00e9 offrent des meilleures pratiques reconnues mondialement. Aligner la DORA avec ces standards assure une gestion coh\u00e9rente de la cybers\u00e9curit\u00e9 et de la conformit\u00e9. Parmi les standards cl\u00e9s \u00e0 consid\u00e9rer, on trouve :<\/p>\n<ul>\n<li><strong>Cadre de cybers\u00e9curit\u00e9 du NIST (NIST CSF)<\/strong><\/li>\n<li><strong>Contr\u00f4les CIS<\/strong><\/li>\n<li><strong>ISO 27001 et 27002<\/strong><\/li>\n<\/ul>\n<p>Les organisations peuvent simplifier leurs processus de gestion en exploitant l'infrastructure et les ressources existantes. Cette gestion peut \u00eatre facilit\u00e9e par des outils conviviaux, permettant des op\u00e9rations rationalis\u00e9es.<\/p>\n<p>Les directives claires fournies par ces standards facilitent la priorisation des efforts et l'allocation des ressources en fonction de l'importance et de l'impact de chaque contr\u00f4le.<\/p>\n<p>Les standards peuvent \u00eatre choisis et adapt\u00e9s en fonction de la taille, de l'activit\u00e9 et des d\u00e9fis de l'organisation. En s'alignant sur la DORA, les mesures de cybers\u00e9curit\u00e9 restent flexibles face aux \u00e9volutions r\u00e9glementaires et technologiques.<\/p>\n<p>Les standards de cybers\u00e9curit\u00e9 int\u00e8grent intrins\u00e8quement le concept d'am\u00e9lioration continue. En alignant ces standards avec la DORA, les organisations peuvent maintenir leurs mesures de cybers\u00e9curit\u00e9 \u00e0 jour face aux nouvelles menaces.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-141415c syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"141415c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3>Se conformer \u00e0 la DORA en mettant en \u0153uvre l'ISO 27001<\/h3>\n<p>ISO 27001, ainsi que son Syst\u00e8me de gestion de la s\u00e9curit\u00e9 de l'information (SGSI) compagnon, offre aux organisations un cadre structur\u00e9 pour se conformer \u00e0 la DORA. Cependant, la certification seule ne garantit pas la conformit\u00e9 ; tout d\u00e9pend de la mani\u00e8re dont la norme ISO est mise en \u0153uvre. Toutes les exigences de la DORA ne sont pas enti\u00e8rement couvertes par ISO 27001\/27002, il sera donc n\u00e9cessaire d'ajouter ou de modifier des contr\u00f4les suppl\u00e9mentaires.<\/p>\n<p>Les domaines cl\u00e9s o\u00f9 ISO 27001 soutient la conformit\u00e9 \u00e0 la DORA :<\/p>\n<ul>\n<li><strong>Gestion des risques li\u00e9s aux TIC<\/strong>: La norme ISO 27001 exige une \u00e9valuation des risques li\u00e9s \u00e0 la s\u00e9curit\u00e9 de l'information et la mise en \u0153uvre de contr\u00f4les appropri\u00e9s, en accord avec les processus syst\u00e9matiques de gestion des risques du DORA.<\/li>\n<li><strong>R\u00e9ponse aux incidents et signalement<\/strong>: La norme ISO 27001 d\u00e9finit des contr\u00f4les pour la gestion des incidents de s\u00e9curit\u00e9, qui correspondent aux exigences du DORA en mati\u00e8re de rapports d'incidents.<\/li>\n<li><strong>Test de r\u00e9silience op\u00e9rationnelle num\u00e9rique<\/strong>: La norme ISO 27001 pr\u00e9voit des contr\u00f4les pour la planification de la continuit\u00e9 des activit\u00e9s, ce qui correspond aux exigences du DORA en mati\u00e8re de tests de r\u00e9silience.<\/li>\n<li><strong>Gestion des risques li\u00e9s aux TIC pour les tiers<\/strong>: La norme ISO 27001 \u00e9tablit des contr\u00f4les pour la gestion de la s\u00e9curit\u00e9 de l'information avec les tiers, ce qui r\u00e9pond aux exigences du DORA en mati\u00e8re de gestion des risques li\u00e9s aux tiers.<\/li>\n<li><strong>Partage d\u2019information<\/strong>: ISO 27001 inclut des contr\u00f4les pour le partage d'informations et le renseignement sur les menaces, soutenant les m\u00e9canismes de partage d'informations externes de la DORA.<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-321eeb0 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"321eeb0\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-d3d2de3 syd-sticky-section-no\" data-id=\"d3d2de3\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-76f882f syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"76f882f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"871\" height=\"637\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/ISO-27001.png\" class=\"attachment-large size-large wp-image-21629\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/ISO-27001.png 871w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/ISO-27001-300x219.png 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/ISO-27001-768x562.png 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/ISO-27001-16x12.png 16w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/ISO-27001-230x168.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/ISO-27001-350x256.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/ISO-27001-480x351.png 480w\" sizes=\"(max-width: 871px) 100vw, 871px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c56d2b9 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"c56d2b9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><strong>Cartographie des contr\u00f4les pertinents des cadres ISO 27001 aux 5 principaux piliers de la DORA.<\/strong><\/h4>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e3705be elementor-tabs-view-horizontal syd-sticky-section-no elementor-widget elementor-widget-tabs\" data-id=\"e3705be\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"tabs.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-tabs\">\n\t\t\t<div class=\"elementor-tabs-wrapper\" role=\"tablist\" >\n\t\t\t\t\t\t\t\t\t<div id=\"elementor-tab-title-2381\" class=\"elementor-tab-title elementor-tab-desktop-title\" aria-selected=\"true\" data-tab=\"1\" role=\"tab\" tabindex=\"0\" aria-controls=\"elementor-tab-content-2381\" aria-expanded=\"false\">Tests de r\u00e9silience op\u00e9rationnelle num\u00e9rique<\/div>\n\t\t\t\t\t\t\t\t\t<div id=\"elementor-tab-title-2382\" class=\"elementor-tab-title elementor-tab-desktop-title\" aria-selected=\"false\" data-tab=\"2\" role=\"tab\" tabindex=\"-1\" aria-controls=\"elementor-tab-content-2382\" aria-expanded=\"false\">Gestion des risques TIC des tiers<\/div>\n\t\t\t\t\t\t\t\t\t<div id=\"elementor-tab-title-2383\" class=\"elementor-tab-title elementor-tab-desktop-title\" aria-selected=\"false\" data-tab=\"3\" role=\"tab\" tabindex=\"-1\" aria-controls=\"elementor-tab-content-2383\" aria-expanded=\"false\">Signalement des incidents li\u00e9s aux TIC<\/div>\n\t\t\t\t\t\t\t\t\t<div id=\"elementor-tab-title-2384\" class=\"elementor-tab-title elementor-tab-desktop-title\" aria-selected=\"false\" data-tab=\"4\" role=\"tab\" tabindex=\"-1\" aria-controls=\"elementor-tab-content-2384\" aria-expanded=\"false\">Partage de l'information<\/div>\n\t\t\t\t\t\t\t\t\t<div id=\"elementor-tab-title-2385\" class=\"elementor-tab-title elementor-tab-desktop-title\" aria-selected=\"false\" data-tab=\"5\" role=\"tab\" tabindex=\"-1\" aria-controls=\"elementor-tab-content-2385\" aria-expanded=\"false\">Gestion des risques TIC<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t<div class=\"elementor-tabs-content-wrapper\" role=\"tablist\" aria-orientation=\"vertical\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-tab-title elementor-tab-mobile-title\" aria-selected=\"true\" data-tab=\"1\" role=\"tab\" tabindex=\"0\" aria-controls=\"elementor-tab-content-2381\" aria-expanded=\"false\">Tests de r\u00e9silience op\u00e9rationnelle num\u00e9rique<\/div>\n\t\t\t\t\t<div id=\"elementor-tab-content-2381\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"1\" role=\"tabpanel\" aria-labelledby=\"elementor-tab-title-2381\" tabindex=\"0\" hidden=\"false\"><p><strong>ID.AM-05<\/strong>:<\/p>\n<div class=\"page\" title=\"Page 18\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>Les actifs sont class\u00e9s par ordre de priorit\u00e9 en fonction de leur classification, de leur criticit\u00e9, de leurs ressources et de leur impact sur la mission.<\/p>\n<div class=\"page\" title=\"Page 18\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.RA-02<\/strong>:<\/p>\n<p>Les renseignements sur les cybermenaces proviennent de forums et de sources d'\u00e9change d'informations.<\/p>\n<div class=\"page\" title=\"Page 18\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.RA-08<\/strong>:<\/p>\n<p>Des processus de r\u00e9ception, d'analyse et de r\u00e9ponse aux divulgations de vuln\u00e9rabilit\u00e9s sont mis en place.<\/p>\n<div class=\"page\" title=\"Page 19\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.RA-03<\/strong>:<\/p>\n<p>Les menaces internes et externes qui p\u00e8sent sur l'organisation sont identifi\u00e9es et enregistr\u00e9es.<\/p>\n<div class=\"page\" title=\"Page 19\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.IM-04<\/strong>:<\/p>\n<p>R\u00e9ponse aux incidents<br \/>et d'autres plans de cybers\u00e9curit\u00e9 qui ont une incidence sur les op\u00e9rations<br \/>sont \u00e9tablies, communiqu\u00e9es, maintenues et am\u00e9lior\u00e9es<\/p>\n<div class=\"page\" title=\"Page 19\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>PR.IR-02<\/strong>:<\/p>\n<p>Les actifs technologiques de l'organisation sont prot\u00e9g\u00e9s contre les menaces environnementales<\/p>\n<div class=\"page\" title=\"Page 19\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>PR.IR-03<\/strong>:<\/p>\n<p>Des m\u00e9canismes sont mis en \u0153uvre pour r\u00e9pondre aux exigences de r\u00e9silience dans des situations normales et d\u00e9favorables.<\/p>\n<div class=\"page\" title=\"Page 20\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>PR.IR-04<\/strong>:<\/p>\n<p>Une capacit\u00e9 de ressources ad\u00e9quate pour garantir la disponibilit\u00e9 de l'information<\/p>\n<div class=\"page\" title=\"Page 20\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>RS.AN-06<\/strong>:<\/p>\n<p>Les actions r\u00e9alis\u00e9es au cours d'une enqu\u00eate sont enregistr\u00e9es et l'int\u00e9grit\u00e9 et la provenance des enregistrements sont pr\u00e9serv\u00e9es.<\/p>\n<div class=\"page\" title=\"Page 20\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>RS.AN-07<\/strong>:<\/p>\n<p>Les donn\u00e9es et m\u00e9tadonn\u00e9es relatives aux incidents sont collect\u00e9es et leur int\u00e9grit\u00e9 et leur provenance sont pr\u00e9serv\u00e9es.<\/p>\n<div class=\"page\" title=\"Page 20\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>RC.CO-03<\/strong>:<\/p>\n<p>Les activit\u00e9s de redressement et les progr\u00e8s r\u00e9alis\u00e9s dans le r\u00e9tablissement des capacit\u00e9s op\u00e9rationnelles sont communiqu\u00e9s aux parties prenantes internes et externes d\u00e9sign\u00e9es.<\/p>\n<div class=\"page\" title=\"Page 21\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.29<\/strong>:<\/p>\n<p>S\u00e9curit\u00e9 de l'information en cas de perturbation<\/p>\n<div class=\"page\" title=\"Page 21\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.30<\/strong>:<\/p>\n<p>Pr\u00e9paration des TIC \u00e0 la continuit\u00e9 des activit\u00e9s<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p><strong>\u00a0<\/strong><\/p><\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-tab-title elementor-tab-mobile-title\" aria-selected=\"false\" data-tab=\"2\" role=\"tab\" tabindex=\"-1\" aria-controls=\"elementor-tab-content-2382\" aria-expanded=\"false\">Gestion des risques TIC des tiers<\/div>\n\t\t\t\t\t<div id=\"elementor-tab-content-2382\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"2\" role=\"tabpanel\" aria-labelledby=\"elementor-tab-title-2382\" tabindex=\"0\" hidden=\"hidden\"><p><strong>GV.SC-01<\/strong>:<\/p>\n<div class=\"page\" title=\"Page 22\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>Un programme, une strat\u00e9gie, des objectifs, des politiques et des processus de gestion des risques li\u00e9s \u00e0 la cybers\u00e9curit\u00e9 dans la cha\u00eene d'approvisionnement sont \u00e9tablis et approuv\u00e9s par les parties prenantes de l'organisation.<\/p>\n<div class=\"page\" title=\"Page 22\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>GV.SC-02<\/strong>:<\/p>\n<p>R\u00f4les en mati\u00e8re de cybers\u00e9curit\u00e9<br \/>et les responsabilit\u00e9s \u00e0 l'\u00e9gard des fournisseurs, des clients et des partenaires sont \u00e9tablies, communiqu\u00e9es et coordonn\u00e9es en interne et en externe<\/p>\n<div class=\"page\" title=\"Page 22\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>GV.SC-03<\/strong>:<\/p>\n<p>La gestion des risques li\u00e9s \u00e0 la cybers\u00e9curit\u00e9 de la cha\u00eene d'approvisionnement est int\u00e9gr\u00e9e dans les processus de gestion, d'\u00e9valuation et d'am\u00e9lioration des risques li\u00e9s \u00e0 la cybers\u00e9curit\u00e9 et \u00e0 l'entreprise.<\/p>\n<div class=\"page\" title=\"Page 23\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<div class=\"page\" title=\"Page 23\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>GV.SC-04<\/strong>:<\/p>\n<p>Les fournisseurs sont connus et class\u00e9s par ordre de priorit\u00e9 en fonction de leur criticit\u00e9<\/p>\n<div class=\"page\" title=\"Page 23\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>GV.SC-05<\/strong>:<\/p>\n<p>Exigences relatives aux risques de cybers\u00e9curit\u00e9<br \/>dans les cha\u00eenes d'approvisionnement sont \u00e9tablies, hi\u00e9rarchis\u00e9es et int\u00e9gr\u00e9es dans les contrats et autres types d'accords avec les fournisseurs et autres tiers concern\u00e9s<\/p>\n<div class=\"page\" title=\"Page 23\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>GV.SC-06<\/strong>:<\/p>\n<p>Une planification et une diligence raisonnable sont effectu\u00e9es pour r\u00e9duire les risques avant de nouer des relations formelles avec des fournisseurs ou d'autres tiers.<\/p>\n<div class=\"page\" title=\"Page 23\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>GV.SC-07<\/strong>:<\/p>\n<p>Les risques pos\u00e9s par un fournisseur, ses produits et ses services, et<br \/>d'autres tiers sont comprises, enregistr\u00e9es, class\u00e9es par ordre de priorit\u00e9, \u00e9valu\u00e9es, font l'objet d'une r\u00e9ponse et d'un suivi tout au long de la relation.<\/p>\n<div class=\"page\" title=\"Page 24\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>GV.SC-09<\/strong>:<\/p>\n<p>Les pratiques de s\u00e9curit\u00e9 de la cha\u00eene d'approvisionnement sont int\u00e9gr\u00e9es \u00e0 la cybers\u00e9curit\u00e9<br \/>et des programmes de gestion des risques de l'entreprise, et leurs performances sont contr\u00f4l\u00e9es tout au long du cycle de vie du produit technologique et du service.<\/p>\n<div class=\"page\" title=\"Page 24\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>GV.SC-10<\/strong>:<\/p>\n<p>Les plans de gestion des risques li\u00e9s \u00e0 la cha\u00eene d'approvisionnement en mati\u00e8re de cybers\u00e9curit\u00e9 comprennent des dispositions relatives aux activit\u00e9s qui se d\u00e9roulent apr\u00e8s la conclusion d'un partenariat ou d'un accord de service.<\/p>\n<div class=\"page\" title=\"Page 24\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.AM-03<\/strong>:<\/p>\n<p>Les repr\u00e9sentations des communications r\u00e9seau autoris\u00e9es de l'organisation et des flux de donn\u00e9es r\u00e9seau internes et externes sont maintenues.<\/p>\n<div class=\"page\" title=\"Page 24\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.AM-04<\/strong>:<\/p>\n<p>Les stocks de services fournis par les fournisseurs sont maintenus \u00e0 un niveau \u00e9lev\u00e9.<\/p>\n<div class=\"page\" title=\"Page 25\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.AM-05<\/strong>:<\/p>\n<p>Les actifs sont class\u00e9s par ordre de priorit\u00e9 en fonction de leur classification, de leur criticit\u00e9, de leurs ressources et de leur impact sur la mission.<\/p>\n<div class=\"page\" title=\"Page 25\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.RA-09<\/strong>:<\/p>\n<p>L'authenticit\u00e9 et l'int\u00e9grit\u00e9 du mat\u00e9riel et des logiciels sont \u00e9valu\u00e9es avant leur acquisition et leur utilisation.<\/p>\n<div class=\"page\" title=\"Page 25\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.RA-10<\/strong>:<\/p>\n<p>Les fournisseurs essentiels sont \u00e9valu\u00e9s avant l'acquisition.<\/p>\n<div class=\"page\" title=\"Page 25\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>PR.AA-01<\/strong>:<\/p>\n<p>Les identit\u00e9s et les r\u00e9f\u00e9rences des utilisateurs, des services et du mat\u00e9riel autoris\u00e9s sont g\u00e9r\u00e9es par l'organisation.<\/p>\n<div class=\"page\" title=\"Page 26\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>PR.AA-02<\/strong>:<\/p>\n<p>Les identit\u00e9s sont v\u00e9rifi\u00e9es et li\u00e9es \u00e0 des r\u00e9f\u00e9rences en fonction du contexte de l'interaction.<\/p>\n<div class=\"page\" title=\"Page 26\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>PR.AA-03<\/strong>:<\/p>\n<p>Les utilisateurs, les services et le mat\u00e9riel sont authentifi\u00e9s<\/p>\n<div class=\"page\" title=\"Page 26\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>PR.AA-05<\/strong>:<\/p>\n<p>Les permissions d'acc\u00e8s, les droits et les autorisations sont d\u00e9finis dans une politique, g\u00e9r\u00e9s, appliqu\u00e9s et r\u00e9vis\u00e9s, et int\u00e8grent les principes du moindre privil\u00e8ge et de la s\u00e9paration des t\u00e2ches.<\/p>\n<div class=\"page\" title=\"Page 26\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>PR.AA-06<\/strong>:<\/p>\n<p>L'acc\u00e8s physique aux biens est g\u00e9r\u00e9, contr\u00f4l\u00e9 et impos\u00e9 en fonction du risque.<\/p>\n<div class=\"page\" title=\"Page 27\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.19<\/strong>:<\/p>\n<p>S\u00e9curit\u00e9 de l'information dans les accords avec les fournisseurs<\/p>\n<div class=\"page\" title=\"Page 27\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.20<\/strong>:<\/p>\n<p>La s\u00e9curit\u00e9 de l'information dans les accords avec les fournisseurs<\/p>\n<div class=\"page\" title=\"Page 27\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.21<\/strong>:<\/p>\n<p>Gestion de la s\u00e9curit\u00e9 de l'information dans la cha\u00eene d'approvisionnement des technologies de l'information et de la communication (TIC)<\/p>\n<div class=\"page\" title=\"Page 27\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.22<\/strong>:<\/p>\n<p>Suivi, examen et gestion des modifications du service des fournisseurs<\/p>\n<div class=\"page\" title=\"Page 28\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.23<\/strong>:<\/p>\n<p>S\u00e9curit\u00e9 de l'information pour l'utilisation des services en nuage<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-tab-title elementor-tab-mobile-title\" aria-selected=\"false\" data-tab=\"3\" role=\"tab\" tabindex=\"-1\" aria-controls=\"elementor-tab-content-2383\" aria-expanded=\"false\">Signalement des incidents li\u00e9s aux TIC<\/div>\n\t\t\t\t\t<div id=\"elementor-tab-content-2383\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"3\" role=\"tabpanel\" aria-labelledby=\"elementor-tab-title-2383\" tabindex=\"0\" hidden=\"hidden\"><p>A.5.24 :<\/p>\n<div class=\"page\" title=\"Page 16\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>Planification et pr\u00e9paration de la gestion des incidents de s\u00e9curit\u00e9 de l'information<\/p>\n<div class=\"page\" title=\"Page 16\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>A.5.25 :<\/p>\n<p>\u00c9valuation et d\u00e9cision sur les \u00e9v\u00e9nements li\u00e9s \u00e0 la s\u00e9curit\u00e9 de l'information<\/p>\n<div class=\"page\" title=\"Page 16\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>A.5.26 :<\/p>\n<p>R\u00e9ponse aux incidents li\u00e9s \u00e0 la s\u00e9curit\u00e9 de l'information<\/p>\n<div class=\"page\" title=\"Page 16\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>A.5.27 :<\/p>\n<p>Tirer les le\u00e7ons des incidents li\u00e9s \u00e0 la s\u00e9curit\u00e9 de l'information<\/p>\n<div class=\"page\" title=\"Page 17\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>A.5.28 :<\/p>\n<p>Collecte des preuves<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-tab-title elementor-tab-mobile-title\" aria-selected=\"false\" data-tab=\"4\" role=\"tab\" tabindex=\"-1\" aria-controls=\"elementor-tab-content-2384\" aria-expanded=\"false\">Partage de l'information<\/div>\n\t\t\t\t\t<div id=\"elementor-tab-content-2384\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"4\" role=\"tabpanel\" aria-labelledby=\"elementor-tab-title-2384\" tabindex=\"0\" hidden=\"hidden\"><p><strong>GV.RM-05<\/strong>:<\/p>\n<div class=\"page\" title=\"Page 29\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>Des lignes de communication sont \u00e9tablies au sein de l'organisation pour les risques li\u00e9s \u00e0 la cybers\u00e9curit\u00e9, y compris les risques provenant des fournisseurs et d'autres tiers.<\/p>\n<div class=\"page\" title=\"Page 29\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.RA-02<\/strong>:<\/p>\n<p>Les renseignements sur les cybermenaces proviennent de forums d'\u00e9change d'informations et de sources d'information.<\/p>\n<div class=\"page\" title=\"Page 29\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>ID.RA-03<\/strong>:<\/p>\n<p>Les menaces internes et externes qui p\u00e8sent sur l'organisation sont identifi\u00e9es et enregistr\u00e9es.<\/p>\n<div class=\"page\" title=\"Page 30\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>RS.CO-02<\/strong>:<\/p>\n<p>Les parties prenantes internes et externes sont inform\u00e9es de l'incident<\/p>\n<div class=\"page\" title=\"Page 30\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>RS.CO-03<\/strong>:<\/p>\n<p>Les informations sont partag\u00e9es avec les parties prenantes internes et externes d\u00e9sign\u00e9es.<\/p>\n<div class=\"page\" title=\"Page 30\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>RC.CO-03<\/strong>:<\/p>\n<p>Les activit\u00e9s de redressement et les progr\u00e8s r\u00e9alis\u00e9s dans le r\u00e9tablissement des capacit\u00e9s op\u00e9rationnelles sont communiqu\u00e9s aux parties prenantes internes et externes d\u00e9sign\u00e9es.<\/p>\n<div class=\"page\" title=\"Page 30\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>RC.CO-04<\/strong>:<\/p>\n<p>Les mises \u00e0 jour publiques sur le r\u00e9tablissement de l'incident sont diffus\u00e9es \u00e0 l'aide de m\u00e9thodes et de messages approuv\u00e9s.<\/p>\n<div class=\"page\" title=\"Page 31\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.5<\/strong>:<\/p>\n<p>Contact avec les autorit\u00e9s<\/p>\n<div class=\"page\" title=\"Page 31\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.6<\/strong>:<\/p>\n<p>Contact avec des groupes d'int\u00e9r\u00eat<\/p>\n<div class=\"page\" title=\"Page 31\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.7<\/strong>:<\/p>\n<p>Renseignements sur les menaces<\/p>\n<div class=\"page\" title=\"Page 31\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.14<\/strong>:<\/p>\n<p>Transfert d'informations<\/p>\n<div class=\"page\" title=\"Page 32\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>A.5.31<\/strong>:<\/p>\n<p>Exigences l\u00e9gales, statutaires, r\u00e9glementaires et contractuelles<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-tab-title elementor-tab-mobile-title\" aria-selected=\"false\" data-tab=\"5\" role=\"tab\" tabindex=\"-1\" aria-controls=\"elementor-tab-content-2385\" aria-expanded=\"false\">Gestion des risques TIC<\/div>\n\t\t\t\t\t<div id=\"elementor-tab-content-2385\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"5\" role=\"tabpanel\" aria-labelledby=\"elementor-tab-title-2385\" tabindex=\"0\" hidden=\"hidden\"><div class=\"page\" title=\"Page 8\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>Clause 6.1<\/strong>:<\/p>\n<div class=\"page\" title=\"Page 8\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>Actions \u00e0 mener<br \/>risques et opportunit\u00e9s (y compris toutes les sous-clauses)<\/p>\n<div class=\"page\" title=\"Page 8\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>Article 8<\/strong>:<\/p>\n<p>Fonctionnement (y compris toutes les sous-clauses)<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-b7d5a84 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"b7d5a84\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3>Vers une conformit\u00e9 totale \u00e0 la DORA<\/h3>\n<p>Bien que l'ISO 27001 fournisse une base solide, atteindre une conformit\u00e9 totale avec la DORA n\u00e9cessite des mesures suppl\u00e9mentaires. Les organisations doivent :<\/p>\n<ul>\n<li>Identifier les exigences sp\u00e9cifiques de la DORA qui ne sont pas enti\u00e8rement couvertes par l'ISO 27001, telles que les obligations de signalement des incidents, les proc\u00e9dures de gestion des risques des tiers et les tests de reprise op\u00e9rationnelle.<\/li>\n<li>R\u00e9aliser des analyses de lacunes et des \u00e9valuations pour \u00e9valuer leur \u00e9tat actuel par rapport aux exigences de la DORA.<\/li>\n<li>Adapter leur Syst\u00e8me de gestion de la s\u00e9curit\u00e9 de l'information (SGSI) pour y int\u00e9grer des contr\u00f4les et des processus sp\u00e9cifiques \u00e0 la DORA.<\/li>\n<li>\u00c9laborer et mettre en \u0153uvre la documentation suppl\u00e9mentaire exig\u00e9e par la DORA, y compris les proc\u00e9dures de signalement des incidents et les plans de reprise.<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e3d17e1 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"e3d17e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><span class=\"lime bold\">Comment la conformit\u00e9 au NIST CSF ouvre la voie au succ\u00e8s de la DORA<\/span><\/h3>\n<p>Le cadre de cybers\u00e9curit\u00e9 du NIST (NIST CSF) offre une approche structur\u00e9e pour g\u00e9rer et r\u00e9duire les risques de cybers\u00e9curit\u00e9, am\u00e9liorant la communication sur la gestion des risques et la cybers\u00e9curit\u00e9 entre les parties prenantes internes et externes.<\/p>\n<ul>\n<li><strong>Gestion des risques li\u00e9s aux TIC<\/strong>: Le NIST CSF offre une approche compl\u00e8te pour identifier, \u00e9valuer et g\u00e9rer les risques de cybers\u00e9curit\u00e9, en s'alignant sur le pilier de gestion des risques de la DORA.<\/li>\n<li><strong>R\u00e9ponse aux incidents et signalement<\/strong>: Les fonctions \u00ab R\u00e9pondre \u00bb et \u00ab R\u00e9cup\u00e9rer \u00bb du NIST CSF soutiennent la planification des r\u00e9ponses, les communications et l'analyse, en s'alignant sur les exigences de signalement des incidents de la DORA.<\/li>\n<li><strong>Test de r\u00e9silience op\u00e9rationnelle num\u00e9rique<\/strong>: Les fonctions \u00ab Identifier \u00bb et \u00ab Prot\u00e9ger \u00bb du NIST CSF soutiennent les activit\u00e9s de planification de la r\u00e9silience, aidant \u00e0 l'identification des vuln\u00e9rabilit\u00e9s et \u00e0 l'am\u00e9lioration des mesures de cybers\u00e9curit\u00e9.<\/li>\n<li><strong>Gestion des risques li\u00e9s aux TIC pour les tiers<\/strong>: Les fonctions \u00ab Gouverner \u00bb, \u00ab Identifier \u00bb et \u00ab Prot\u00e9ger \u00bb du NIST CSF soutiennent la gestion des risques de la cha\u00eene d'approvisionnement, en s'alignant sur les exigences de gestion des risques de la cha\u00eene d'approvisionnement de la DORA.<\/li>\n<li><strong>Partage d\u2019information<\/strong>: Le NIST CSF documente des sous-cat\u00e9gories de partage d'informations pour am\u00e9liorer les pratiques de cybers\u00e9curit\u00e9, en s'alignant sur le pilier de partage d'informations de la DORA.<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-50510d6 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"50510d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Voici comment les contr\u00f4les du NIST CSF peuvent \u00eatre mis en correspondance avec ceux de la DORA.<strong> Gestion des tiers<\/strong>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-da2520a elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"da2520a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-63a03d9 syd-sticky-section-no\" data-id=\"63a03d9\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3df9c6c syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"3df9c6c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>GV.SC-01 :<\/strong> Un programme de gestion des risques de la cha\u00eene d'approvisionnement en cybers\u00e9curit\u00e9, incluant la strat\u00e9gie, les objectifs, les politiques et les processus, est \u00e9tabli et approuv\u00e9 par les parties prenantes de l'organisation.<\/p>\n<p><strong>GV.SC-02 :<\/strong> Les r\u00f4les et responsabilit\u00e9s en mati\u00e8re de cybers\u00e9curit\u00e9 pour les fournisseurs, les clients et les partenaires sont \u00e9tablis, communiqu\u00e9s et coordonn\u00e9s en interne et en externe.<\/p>\n<p><strong>GV.SC-03 :<\/strong> La gestion des risques de la cha\u00eene d'approvisionnement en cybers\u00e9curit\u00e9 est int\u00e9gr\u00e9e \u00e0 la gestion des risques de cybers\u00e9curit\u00e9 de l'entreprise, \u00e0 l'\u00e9valuation des risques et aux processus d'am\u00e9lioration.<\/p>\n<p><strong>GV.SC-04 :<\/strong> Les fournisseurs sont identifi\u00e9s et prioritaires en fonction de leur criticit\u00e9.<\/p>\n<p><strong>GV.SC-05 :<\/strong> Les exigences pour traiter les risques de cybers\u00e9curit\u00e9 dans les cha\u00eenes d'approvisionnement sont \u00e9tablies, prioritaires et int\u00e9gr\u00e9es dans les contrats et autres accords avec les fournisseurs et les tiers pertinents.<\/p>\n<p><strong>GV.SC-06 :<\/strong> La planification et la diligence raisonnable sont effectu\u00e9es pour att\u00e9nuer les risques avant d'\u00e9tablir des relations formelles avec des fournisseurs ou d'autres tiers.<\/p>\n<p><strong>GV.SC-07 :<\/strong> Les risques pos\u00e9s par un fournisseur, leurs produits et services, et d'autres tiers sont compris, enregistr\u00e9s, prioris\u00e9s, \u00e9valu\u00e9s, trait\u00e9s et surveill\u00e9s tout au long de la relation.<\/p>\n<p><strong>GV.SC-09 :<\/strong> Les pratiques de s\u00e9curit\u00e9 de la cha\u00eene d'approvisionnement sont int\u00e9gr\u00e9es aux programmes de gestion des risques en cybers\u00e9curit\u00e9 et d'entreprise, avec une performance surveill\u00e9e tout au long du cycle de vie des produits et services technologiques.<\/p>\n<p><strong>GV.SC-10 :<\/strong> Les plans de gestion des risques de la cha\u00eene d'approvisionnement en cybers\u00e9curit\u00e9 incluent des dispositions pour les activit\u00e9s apr\u00e8s la conclusion d'un partenariat ou d'un accord de service.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-f2e277d syd-sticky-section-no\" data-id=\"f2e277d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1a38182 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"1a38182\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"674\" height=\"606\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/NIST-2.0.png\" class=\"attachment-large size-large wp-image-21615\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/NIST-2.0.png 674w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/NIST-2.0-300x270.png 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/NIST-2.0-13x12.png 13w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/NIST-2.0-230x207.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/NIST-2.0-350x315.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/NIST-2.0-480x432.png 480w\" sizes=\"(max-width: 674px) 100vw, 674px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-fd1135e syd-sticky-section-no\" data-id=\"fd1135e\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f1b1c5c syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"f1b1c5c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>ID.AM-03 :<\/strong> Les repr\u00e9sentations de la communication r\u00e9seau autoris\u00e9e de l'organisation et des flux de donn\u00e9es internes et externes sont maintenues.<\/p>\n<p><strong>ID.AM-04 :<\/strong> Les inventaires des services fournis par les fournisseurs sont maintenus.<\/p>\n<p><strong>ID.AM-05 :<\/strong> Les actifs sont prioris\u00e9s en fonction de leur classification, de leur criticit\u00e9, de leurs ressources et de leur impact sur la mission.<\/p>\n<p><strong>ID.RA-09 :<\/strong> L'authenticit\u00e9 et l'int\u00e9grit\u00e9 du mat\u00e9riel et des logiciels sont \u00e9valu\u00e9es avant leur acquisition et leur utilisation.<\/p>\n<p><strong>ID.RA-10 :<\/strong> Les fournisseurs critiques sont \u00e9valu\u00e9s avant l'acquisition.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2a7952a syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"2a7952a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>PR.AA-01 :<\/strong> Les identit\u00e9s et les identifiants des utilisateurs, services et appareils autoris\u00e9s sont g\u00e9r\u00e9s par l'organisation.<\/p>\n<p><strong>PR.AA-02 :<\/strong> Les identit\u00e9s sont v\u00e9rifi\u00e9es et li\u00e9es aux identifiants en fonction du contexte des interactions.<\/p>\n<p><strong>PR.AA-03 :<\/strong> Les utilisateurs, services et appareils sont authentifi\u00e9s.<\/p>\n<p><strong>PR.AA-05 :<\/strong> Les autorisations d'acc\u00e8s, les droits et les privil\u00e8ges sont d\u00e9finis dans une politique, g\u00e9r\u00e9s, appliqu\u00e9s et r\u00e9vis\u00e9s, en int\u00e9grant les principes du moindre privil\u00e8ge et de la s\u00e9paration des t\u00e2ches.<\/p>\n<p><strong>PR.AA-06 :<\/strong> L'acc\u00e8s physique aux actifs est g\u00e9r\u00e9, surveill\u00e9 et appliqu\u00e9 proportionnellement aux risques.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-79ecc15 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"79ecc15\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3>Int\u00e9gration des contr\u00f4les CIS dans DORA<\/h3>\n<p>Dans le paysage \u00e9volutif de la cybers\u00e9curit\u00e9 mondiale, la r\u00e9silience op\u00e9rationnelle et la conformit\u00e9 r\u00e9glementaire sont primordiales.<\/p>\n<p>L'importance des d\u00e9fis pos\u00e9s par la cybers\u00e9curit\u00e9 n\u00e9cessite une approche strat\u00e9gique en corr\u00e9lant des cadres \u00e9prouv\u00e9s avec les exigences r\u00e9glementaires.<\/p>\n<p>Les CIS Controls sont un ensemble de meilleures pratiques recommand\u00e9es con\u00e7ues pour pr\u00e9venir les cyberattaques les plus courantes. D\u00e9velopp\u00e9s par des experts en cybers\u00e9curit\u00e9 du CIS, ces contr\u00f4les offrent aux organisations une approche structur\u00e9e pour s\u00e9curiser leurs syst\u00e8mes informatiques et leurs donn\u00e9es.<\/p>\n<p>Les contr\u00f4les de s\u00e9curit\u00e9 critiques du Center for Internet Security (CIS Controls v8), avec 18 contr\u00f4les, offrent des recommandations concr\u00e8tes aux organisations de toutes tailles pour pr\u00e9venir les cyberattaques.<\/p>\n<p>Les CIS Controls int\u00e8grent plus d'une douzaine de grands standards internationaux de cybers\u00e9curit\u00e9, tels que SOC 2, HIPAA, MITRE ATT&amp;CK, NIST et PCI DSS.<\/p>\n<p>L'int\u00e9gration des CIS Controls avec la DORA offre aux organisations une approche compl\u00e8te pour g\u00e9rer les risques de cybers\u00e9curit\u00e9 et la conformit\u00e9 r\u00e9glementaire. Elle fournit une m\u00e9thodologie pratique pour atteindre la r\u00e9silience exig\u00e9e par la DORA gr\u00e2ce aux pratiques de s\u00e9curit\u00e9 \u00e9prouv\u00e9es d\u00e9taill\u00e9es dans les CIS Controls.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-563234a syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"563234a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Voici comment les contr\u00f4les CIS peuvent \u00eatre mis en correspondance avec les DORA<strong> Gestion des tiers<\/strong>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-7c5962e elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"7c5962e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-952bd8c syd-sticky-section-no\" data-id=\"952bd8c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b5e30fd syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"b5e30fd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1024\" height=\"792\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png.webp\" class=\"attachment-large size-large wp-image-21625\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png.webp 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png-300x232.webp 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png-768x594.webp 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png-16x12.webp 16w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png-1000x773.webp 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png-230x178.webp 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png-350x271.webp 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/controls-v8-grid-with-safeguards-1.png-480x371.webp 480w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-2fc4a38 syd-sticky-section-no\" data-id=\"2fc4a38\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-228ab43 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"228ab43\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"page\" title=\"Page 8\">\n<div class=\"page\" title=\"Page 10\">\n<div class=\"section\">\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p><strong>Contr\u00f4le CIS 12<\/strong>: Gestion de l'infrastructure du r\u00e9seau<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"layoutArea\">\n<div class=\"column\">\n<p>\u2022 Identifier et \u00e9valuer les risques associ\u00e9s aux fournisseurs TIC tiers, \u00e9tablir des exigences contractuelles pour que les fournisseurs tiers respectent les normes de s\u00e9curit\u00e9 et surveiller la conformit\u00e9 des fournisseurs tiers aux obligations contractuelles.<\/p>\n<p><strong>Contr\u00f4le CIS 15<\/strong>: Gestion des fournisseurs de services<\/p>\n<p>\u2022 \u00c9tablir un processus formel pour \u00e9valuer et s\u00e9lectionner les fournisseurs TIC tiers, r\u00e9aliser des \u00e9valuations de diligence raisonnable pour \u00e9valuer la posture de s\u00e9curit\u00e9 des fournisseurs potentiels et \u00e9tablir des accords contractuels incluant des dispositions relatives aux exigences de s\u00e9curit\u00e9 et \u00e0 la supervision.<\/p>\n<p><strong>Contr\u00f4le CIS 17<\/strong>: Gestion de la r\u00e9ponse aux incidents<\/p>\n<p>\u2022  Inclure les fournisseurs tiers dans la planification et la coordination des r\u00e9ponses aux incidents, \u00e9tablir des canaux de communication pour signaler et r\u00e9pondre aux incidents de s\u00e9curit\u00e9 impliquant des fournisseurs tiers et effectuer des examens r\u00e9guliers des performances et de la conformit\u00e9 des fournisseurs tiers.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-807a883 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"807a883\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-de62e8a syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"de62e8a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Alors que la fr\u00e9quence et la sophistication des cyberattaques dans le secteur financier continuent d'augmenter, la conformit\u00e9 \u00e0 la DORA est plus cruciale que jamais. En s'alignant sur des normes de cybers\u00e9curit\u00e9 reconnues internationalement telles que l'ISO 27001, le NIST CSF et les CIS Controls, les institutions financi\u00e8res peuvent non seulement r\u00e9pondre aux exigences strictes de la DORA, mais aussi am\u00e9liorer leur posture globale en mati\u00e8re de cybers\u00e9curit\u00e9, garantissant ainsi la confiance et la continuit\u00e9 des activit\u00e9s dans un paysage num\u00e9rique de plus en plus volatile.<\/p>\n<p>En adoptant une approche proactive et structur\u00e9e de la conformit\u00e9, les institutions financi\u00e8res peuvent g\u00e9rer efficacement le paysage complexe des risques de cybers\u00e9curit\u00e9 et des exigences r\u00e9glementaires.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-b371b01 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"b371b01\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-85a40ed syd-sticky-section-no\" data-id=\"85a40ed\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d8c63f0 syd-sticky-section-no elementor-widget elementor-widget-testimonial\" data-id=\"d8c63f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"testimonial.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-testimonial-wrapper\">\n\t\t\t\n\t\t\t\t\t\t<div class=\"elementor-testimonial-meta elementor-has-image elementor-testimonial-image-position-aside\">\n\t\t\t\t<div class=\"elementor-testimonial-meta-inner\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-image\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1394\" height=\"1511\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS.jpg\" class=\"attachment-full size-full wp-image-19214\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS.jpg 1394w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-277x300.jpg 277w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-945x1024.jpg 945w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-768x832.jpg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-11x12.jpg 11w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-1000x1084.jpg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-230x249.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-350x379.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-480x520.jpg 480w\" sizes=\"(max-width: 1394px) 100vw, 1394px\" \/>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-details\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-name\">Jean-Fran\u00e7ois SCHOONHEERE<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-job\">PDG et fondateur de Stroople<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-7e39c7d syd-sticky-section-no\" data-id=\"7e39c7d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2bbcfed syd-sticky-section-no elementor-widget elementor-widget-testimonial\" data-id=\"2bbcfed\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"testimonial.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-testimonial-wrapper\">\n\t\t\t\n\t\t\t\t\t\t<div class=\"elementor-testimonial-meta elementor-has-image elementor-testimonial-image-position-aside\">\n\t\t\t\t<div class=\"elementor-testimonial-meta-inner\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-image\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1716\" height=\"1836\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire.jpeg\" class=\"attachment-full size-full wp-image-21633\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire.jpeg 1716w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-280x300.jpeg 280w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-957x1024.jpeg 957w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-768x822.jpeg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-1436x1536.jpeg 1436w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-11x12.jpeg 11w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-1000x1070.jpeg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-230x246.jpeg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-350x374.jpeg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/Desire-480x514.jpeg 480w\" sizes=\"(max-width: 1716px) 100vw, 1716px\" \/>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-details\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-name\">D\u00e9sir\u00e9 YAPI<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-job\">Consultant senior en cybers\u00e9curit\u00e9<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-a458ee0 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"a458ee0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e22f6f8 elementor-align-center syd-sticky-section-no elementor-widget elementor-widget-button\" data-id=\"e22f6f8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/www.linkedin.com\/newsletters\/7120442855684231170\/?displayConfirmation=true\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">S'abonner sur LinkedIn<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-64554c2 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"64554c2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Lockbit: from Genesis to the Last Judgment How to Achieve DORA Compliance? A Guide for Cybersecurity Professionals Scroll Down In the financial [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":21642,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[115],"tags":[195],"class_list":["post-21586","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-governance-risk-compliance-cybersecurity","tag-dora"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to achieve DORA compliance? - Stroople<\/title>\n<meta name=\"description\" content=\"By aligning cybersecurity standards with DORA, organizations can keep their cybersecurity measures up to date against new threats.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stroople.com\/fr\/conformite-de-dora\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to achieve DORA compliance? - Stroople\" \/>\n<meta property=\"og:description\" content=\"By aligning cybersecurity standards with DORA, organizations can keep their cybersecurity measures up to date against new threats.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stroople.com\/fr\/conformite-de-dora\/\" \/>\n<meta property=\"og:site_name\" content=\"Stroople\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-23T17:23:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-16T12:01:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/AdobeStock_179689866-1-scaled.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1536\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"STROOPLEADMINISTRATOR\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:site\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"STROOPLEADMINISTRATOR\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/\"},\"author\":{\"name\":\"STROOPLEADMINISTRATOR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\"},\"headline\":\"How to achieve DORA compliance?\",\"datePublished\":\"2024-06-23T17:23:58+00:00\",\"dateModified\":\"2026-08-16T12:01:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/\"},\"wordCount\":2330,\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/AdobeStock_179689866-1-scaled.jpeg\",\"keywords\":[\"DORA\"],\"articleSection\":[\"GRC\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/\",\"name\":\"How to achieve DORA compliance? - Stroople\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/AdobeStock_179689866-1-scaled.jpeg\",\"datePublished\":\"2024-06-23T17:23:58+00:00\",\"dateModified\":\"2026-08-16T12:01:01+00:00\",\"description\":\"By aligning cybersecurity standards with DORA, organizations can keep their cybersecurity measures up to date against new threats.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/AdobeStock_179689866-1-scaled.jpeg\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/AdobeStock_179689866-1-scaled.jpeg\",\"width\":2560,\"height\":1536,\"caption\":\"Businessman touching stock market graph on a virtual screen display.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/dora-compliance\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.stroople.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to achieve DORA compliance?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"name\":\"Stroople\",\"description\":\"Cybersecurity Expertise\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.stroople.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\",\"name\":\"Stroople Cybersecurity\",\"alternateName\":\"Stroople\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"width\":1000,\"height\":1000,\"caption\":\"Stroople Cybersecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Stroople1\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/stroople\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC_kTnaswN04kjIrHU0Pi_qg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\",\"name\":\"STROOPLEADMINISTRATOR\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"caption\":\"STROOPLEADMINISTRATOR\"},\"sameAs\":[\"https:\\\/\\\/stroople.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Comment se mettre en conformit\u00e9 avec la loi DORA ? - Stroople","description":"En alignant les normes de cybers\u00e9curit\u00e9 sur le DORA, les organisations peuvent maintenir leurs mesures de cybers\u00e9curit\u00e9 \u00e0 jour face aux nouvelles menaces.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stroople.com\/fr\/conformite-de-dora\/","og_locale":"fr_FR","og_type":"article","og_title":"How to achieve DORA compliance? - Stroople","og_description":"By aligning cybersecurity standards with DORA, organizations can keep their cybersecurity measures up to date against new threats.","og_url":"https:\/\/www.stroople.com\/fr\/conformite-de-dora\/","og_site_name":"Stroople","article_published_time":"2024-06-23T17:23:58+00:00","article_modified_time":"2026-08-16T12:01:01+00:00","og_image":[{"width":2560,"height":1536,"url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/AdobeStock_179689866-1-scaled.jpeg","type":"image\/jpeg"}],"author":"STROOPLEADMINISTRATOR","twitter_card":"summary_large_image","twitter_creator":"@Stroople1","twitter_site":"@Stroople1","twitter_misc":{"\u00c9crit par":"STROOPLEADMINISTRATOR","Dur\u00e9e de lecture estim\u00e9e":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stroople.com\/dora-compliance\/#article","isPartOf":{"@id":"https:\/\/www.stroople.com\/dora-compliance\/"},"author":{"name":"STROOPLEADMINISTRATOR","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44"},"headline":"How to achieve DORA compliance?","datePublished":"2024-06-23T17:23:58+00:00","dateModified":"2026-08-16T12:01:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stroople.com\/dora-compliance\/"},"wordCount":2330,"publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"image":{"@id":"https:\/\/www.stroople.com\/dora-compliance\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/AdobeStock_179689866-1-scaled.jpeg","keywords":["DORA"],"articleSection":["GRC"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.stroople.com\/dora-compliance\/","url":"https:\/\/www.stroople.com\/dora-compliance\/","name":"Comment se mettre en conformit\u00e9 avec la loi DORA ? - Stroople","isPartOf":{"@id":"https:\/\/www.stroople.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stroople.com\/dora-compliance\/#primaryimage"},"image":{"@id":"https:\/\/www.stroople.com\/dora-compliance\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/AdobeStock_179689866-1-scaled.jpeg","datePublished":"2024-06-23T17:23:58+00:00","dateModified":"2026-08-16T12:01:01+00:00","description":"En alignant les normes de cybers\u00e9curit\u00e9 sur le DORA, les organisations peuvent maintenir leurs mesures de cybers\u00e9curit\u00e9 \u00e0 jour face aux nouvelles menaces.","breadcrumb":{"@id":"https:\/\/www.stroople.com\/dora-compliance\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stroople.com\/dora-compliance\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/dora-compliance\/#primaryimage","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/AdobeStock_179689866-1-scaled.jpeg","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/06\/AdobeStock_179689866-1-scaled.jpeg","width":2560,"height":1536,"caption":"Businessman touching stock market graph on a virtual screen display."},{"@type":"BreadcrumbList","@id":"https:\/\/www.stroople.com\/dora-compliance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.stroople.com\/"},{"@type":"ListItem","position":2,"name":"How to achieve DORA compliance?"}]},{"@type":"WebSite","@id":"https:\/\/www.stroople.com\/#website","url":"https:\/\/www.stroople.com\/","name":"Stroople","description":"Expertise en cybers\u00e9curit\u00e9","publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stroople.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.stroople.com\/#organization","name":"Stroople Cybers\u00e9curit\u00e9","alternateName":"Stroople","url":"https:\/\/www.stroople.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","width":1000,"height":1000,"caption":"Stroople Cybersecurity"},"image":{"@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Stroople1","https:\/\/www.linkedin.com\/company\/stroople\/","https:\/\/www.youtube.com\/channel\/UC_kTnaswN04kjIrHU0Pi_qg"]},{"@type":"Person","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44","name":"STROOPLEADMINISTRATEUR","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","caption":"STROOPLEADMINISTRATOR"},"sameAs":["https:\/\/stroople.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/21586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/comments?post=21586"}],"version-history":[{"count":1,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/21586\/revisions"}],"predecessor-version":[{"id":29198,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/21586\/revisions\/29198"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media\/21642"}],"wp:attachment":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media?parent=21586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/categories?post=21586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/tags?post=21586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}